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because they are dependent claims and are not drafted in accordance with the second and third sentences of Rule 6.4(a). 
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searchable claims. 
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4. No required additional search fees were timely paid by the applicant. Consequently, this international search report is 

restricted to the invention first mentioned in the claims; it is covered by claims Nos.: 1-8 amd 1 8-2 1 

The additional search fees were accompanied by the applicant's protest and, where applicable, the 
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BOX III. OBSERVATIONS WHERE UNITY OF INVENTION IS LACKING 

Group I, claim(s) 1-8 and 18-21 , drawn to a device computing a public key as a function of the private key and constructing a device 
certificate as a function of the device ID, 

Group 2, claim(s), 9-14 drawn to a server comprising a number generator generating a first number, a certificate request module generating 
a request for a device certificate, an interface sending a response that includes a second number, a second signature that is generated with 
the second number and a device certificate, and a certificate verification module verifying that the first number and the second number 
match, 

Group 3, claim(s), claims 15-17 and 24 drawn to a device initializing a state variable to an initial value, computing a key as a function of a 
secret seed random number, incrementing the sequence number, generating a random number as a function of a key and the state variable, 
incrementing the state variable and generating a random number using the key and incremented state variable, 

Group 4, claim(s), claims 22-23 drawn to a device comprising a secure processor and a secure on-chip memory including a security kernel 
haying an authenticated security API. 

This International Searching Authority considers the international application does not comply with the requirements of unity of invention 
(Rules 13.1, 13.2 and 13.3) for the reasons indicated below: 

The Invention listed as Groups 1-5 do not relate to a single general inventive concept under PCX Rule 13.1 because, under PCT 
Rule 13.2 they lack the same or corresponding special technical feature for the following reasons: Group 1 relates to 
computing a public key as a function of the private key and a device certificate as a function of the device ID, Group 2 relates 
to generating of a first number, a second number, a second signature and a certificate, and verifying that the first number and 
the second number match, and Group 3 relates to computations involving initializing a state variable, an initial value, and 
generating a random number and a key, Group 4 relates to security kernerl generating a device certificate. 
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